managed-deepagents 0.5.0-dev.78 → 0.5.0-dev.80

package/dist/connectors/toolserver/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/toolserver/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,WAAW,EACX,UAAU,EACV,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,cAAc,GACf,MAAM,cAAc,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IACxE,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GACzC,yBAAyB,GAAG;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B,CAAC;AAEJ,4CAA4C;AAC5C,MAAM,MAAM,0BAA0B,GAAG,CACvC,MAAM,CAAC,EAAE,yBAAyB,KAC/B,mBAAmB,CAAC;AA8BzB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EACrD,KAAK,GAAE,CAAC,CAAC,WAAgB,GACxB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAqB1B;AAOD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,GACZ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAKvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,GACZ,0BAA0B,CAU5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CACvC,qBAAqB,EACrB,0BAA0B,CAMkC,CAAC"}

package/dist/connectors/toolserver/index.js

@@ -0,0 +1,150 @@
+/**
+ * Tool server connectors — the integrations a workspace manages in LangSmith.
+ *
+ * A workspace connects Gmail, Slack, Linear, … once in LangSmith; declaring the
+ * matching connector is how a Managed Deep Agent gets those tools. The provider's
+ * tokens stay in LangSmith's vault: MDA calls LangSmith's tool server gateway,
+ * which resolves the credential for the subject and forwards to the tool server.
+ * The deployment never sees, stores, or refreshes a provider token.
+ *
+ * @example
+ * ```ts
+ * // connectors/gmail.ts
+ * import { connectors } from "managed-deepagents";
+ *
+ * export const connector = connectors.gmail({
+ *   includeTools: ["gmail_read_emails", "gmail_draft_email"],
+ * });
+ * ```
+ *
+ * ## Whose credentials
+ *
+ * Nothing here. Which workspace the call runs against, which key authenticates
+ * it, and whose connection it resolves are facts about the deployment, not
+ * choices the agent's source makes — so they come from the environment
+ * (`LANGSMITH_API_KEY`, `LANGSMITH_ENDPOINT`, `LANGCHAIN_WORKSPACE_ID`) and the
+ * declaration is only ever about which tools the agent gets.
+ *
+ * The gateway resolves credentials for whoever the call authenticates as, so the
+ * subject is the deployment's key rather than the caller of the run: every thread
+ * reaches the same connection. A personal key resolves that user's connections,
+ * which is what makes `mda dev` work against your own Gmail. A key with no user
+ * behind it has no subject yet, and has to borrow an agent's shared connection
+ * via `MDA_TOOLSERVER_AGENT_ID` — see the loader for why that is an env var.
+ *
+ * Per-actor credentials — each caller reaching their own Gmail — are not
+ * available through this connector. That needs [credentials](../../identity) with
+ * a resolver that can mint a token for `runtime.identity.actor`.
+ */
+import { z } from "zod";
+import { defineExtension } from "../../extension.js";
+import { STANDALONE_TOOL_SERVER_INTEGRATIONS, } from "./catalog.js";
+export { GITHUB_SLUG, SLACK_SLUG, STANDALONE_TOOL_SERVER_INTEGRATIONS, TOOL_SERVER_INTEGRATIONS, } from "./catalog.js";
+/** Tool names, as the tool server publishes them (already provider-prefixed). */
+const toolNames = z
+    .array(nonEmpty("tool name"))
+    .check((ctx) => {
+    const seen = new Set();
+    for (const name of ctx.value) {
+        if (seen.has(name)) {
+            ctx.issues.push({
+                code: "custom",
+                input: ctx.value,
+                message: `contains duplicate tool name "${name}"`,
+            });
+        }
+        seen.add(name);
+    }
+})
+    .optional();
+/** The options every tool server integration accepts. */
+const toolServerConnectorFields = {
+    includeTools: toolNames,
+    excludeTools: toolNames,
+    defaultToolTimeout: z
+        .number("defaultToolTimeout must be a positive number")
+        .positive("defaultToolTimeout must be a positive number")
+        .optional(),
+};
+/**
+ * Build the argument schema for one tool server integration.
+ *
+ * `extra` adds whatever the integration accepts on top of the shared options —
+ * `connectors.github`'s sandbox provisioning, say. Every integration is built
+ * from here, so the shared options are spelled, defaulted, and validated once
+ * rather than restated per integration.
+ *
+ * Strict, so an option that does not exist is an error rather than a silently
+ * ignored key — which matches the Python model's `extra="forbid"`, and is what
+ * tells a project that `apiKey` and friends now come from the environment.
+ *
+ * The result is cast to the caller's argument types. Zod cannot describe a
+ * prefaulted object as "accepts undefined, produces defaults" in one type, so
+ * the shape and the declared config interface are kept in step by review.
+ */
+export function toolServerConnectorSchema(extra = {}) {
+    return z
+        .strictObject({ ...toolServerConnectorFields, ...extra })
+        .check((ctx) => {
+        const { includeTools, excludeTools } = ctx.value;
+        const overlap = (includeTools ?? []).filter((name) => (excludeTools ?? []).includes(name));
+        if (overlap.length > 0) {
+            ctx.issues.push({
+                code: "custom",
+                input: ctx.value,
+                message: `selects tool(s) in both \`includeTools\` and \`excludeTools\`: ${[
+                    ...new Set(overlap),
+                ]
+                    .sort()
+                    .join(", ")}`,
+            });
+        }
+    })
+        .prefault({});
+}
+function nonEmpty(field) {
+    const message = `${field} must be a non-empty string`;
+    return z.string(message).refine((value) => value.trim().length > 0, message);
+}
+/**
+ * Build the `tools` hook that loads one integration's tools.
+ *
+ * Shared so every integration reaches the gateway the same way, whether that is
+ * all it does (`connectors.gmail`) or one of the things it does
+ * (`connectors.github`, which also provisions the sandbox).
+ *
+ * The hook runs at agent-graph construction, so the loader is imported lazily —
+ * an authoring-only install never pulls in the MCP client.
+ */
+export function toolServerTools(slug, label) {
+    return async (_ctx, self) => {
+        const { loadToolServerTools } = await import("./load.js");
+        return loadToolServerTools(slug, label, self);
+    };
+}
+/**
+ * Build the factory for one tool server integration.
+ *
+ * For the integrations that are only their tools. An integration with more to
+ * contribute — `connectors.github` — calls `defineExtension` itself with
+ * {@link toolServerConnectorSchema} and {@link toolServerTools}.
+ */
+export function toolServerConnector(slug, label) {
+    return defineExtension("connector", {
+        kind: slug,
+        label,
+        args: toolServerConnectorSchema(),
+        tools: toolServerTools(slug, label),
+    });
+}
+/**
+ * The `connectors` entries for the integrations that have their own factory.
+ *
+ * Built from the catalog so a new integration is one entry, not an entry plus a
+ * namespace line that can be forgotten.
+ */
+export const toolServerConnectors = Object.fromEntries(STANDALONE_TOOL_SERVER_INTEGRATIONS.map(({ slug, factory }) => [
+    factory,
+    toolServerConnector(slug, `connectors.${factory}`),
+]));
+//# sourceMappingURL=index.js.map

package/dist/connectors/toolserver/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/toolserver/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EACL,mCAAmC,GAGpC,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,WAAW,EACX,UAAU,EACV,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,cAAc,CAAC;AA6CtB,iFAAiF;AACjF,MAAM,SAAS,GAAG,CAAC;KAChB,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;KAC5B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,iCAAiC,IAAI,GAAG;aAClD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,yDAAyD;AACzD,MAAM,yBAAyB,GAAG;IAChC,YAAY,EAAE,SAAS;IACvB,YAAY,EAAE,SAAS;IACvB,kBAAkB,EAAE,CAAC;SAClB,MAAM,CAAC,8CAA8C,CAAC;SACtD,QAAQ,CAAC,8CAA8C,CAAC;SACxD,QAAQ,EAAE;CACd,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAK,GAAkB,EAAE;IAEzB,OAAO,CAAC;SACL,YAAY,CAAC,EAAE,GAAG,yBAAyB,EAAE,GAAG,KAAK,EAAE,CAAC;SACxD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAsB,CAAC;QAClE,MAAM,OAAO,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACnD,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,kEAAkE;oBACzE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC;iBACpB;qBACE,IAAI,EAAE;qBACN,IAAI,CAAC,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,QAAQ,CAAC,EAAE,CAAU,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,OAAO,GAAG,GAAG,KAAK,6BAA6B,CAAC;IACtD,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAoB,EACpB,KAAa;IAEb,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAoB,EACpB,KAAa;IAEb,OAAO,eAAe,CAAC,WAAW,EAAE;QAClC,IAAI,EAAE,IAAI;QACV,KAAK;QACL,IAAI,EAAE,yBAAyB,EAG5B;QACH,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAG7B,MAAM,CAAC,WAAW,CACpB,mCAAmC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7D,OAAO;IACP,mBAAmB,CAAC,IAAsB,EAAE,cAAc,OAAO,EAAE,CAAC;CACrE,CAAC,CAC0D,CAAC"}

package/dist/connectors/toolserver/load.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Load a tool server integration's tools through LangSmith's gateway.
+ *
+ * The gateway (`POST /v1/toolserver/servers/{slug}/mcp`) authenticates the call,
+ * resolves the subject's stored credential for that provider, and forwards the
+ * MCP request to the tool server. From the client's side it is an ordinary
+ * remote MCP server that happens to need a LangSmith key, so the same
+ * `@langchain/mcp-adapters` client `connectors.mcp` uses talks to it.
+ *
+ * Names are not prefixed with the integration: the tool server already publishes
+ * them provider-qualified (`gmail_send_email`, `linear_create_issue`), so a
+ * prefix would only produce `gmail__gmail_send_email` and make every
+ * `includeTools` entry a guess about MDA's renaming.
+ *
+ * Everything about *reaching* LangSmith comes from the environment, because it
+ * describes the deployment rather than the agent: `LANGSMITH_API_KEY`,
+ * `LANGSMITH_ENDPOINT` / `LANGCHAIN_ENDPOINT`, `LANGCHAIN_WORKSPACE_ID`.
+ *
+ * `MDA_TOOLSERVER_AGENT_ID` is the exception that should not need to exist. The
+ * gateway resolves credentials for the user behind the key, and a deployment key
+ * that resolves to no user has no subject at all — so until the gateway can
+ * recognize a deployment from its own key, such a deployment has to name the
+ * LangSmith agent whose shared connection it borrows. It is an env var and not a
+ * connector option because it is a fact about where the deployment runs, and
+ * because it disappears once the gateway does that itself.
+ */
+import type { ToolServerConnectorConfig, ToolServerSlug } from "./index.js";
+/**
+ * Load (and cache) the tools of one declared tool server integration.
+ *
+ * `connector` carries the gateway options and is what the cache is keyed by: a
+ * declaration lives as long as the process, and two of them never share a key.
+ */
+export declare function loadToolServerTools(slug: ToolServerSlug, label: string, connector: ToolServerConnectorConfig & object): Promise<unknown[]>;
+/** Drop a connector's cached tools. Test-only. */
+export declare function clearToolServerToolsCacheForTests(connector: object): void;
+/**
+ * Build the integration's gateway URL.
+ *
+ * The gateway path is appended to the configured API base rather than resolved
+ * against its origin, so a LangSmith reachable under a path prefix keeps it. That
+ * makes the base the whole prefix — `https://api.smith.langchain.com`, or
+ * `https://langsmith.acme.com/api` self-hosted — not a host to graft onto.
+ */
+export declare function gatewayUrl(slug: ToolServerSlug, label: string): string;
+/**
+ * Authenticate the call to the gateway.
+ *
+ * The key is read at load time rather than at declaration time so the same
+ * compiled project runs in any workspace, and it is required here rather than
+ * defaulted to empty so a missing key fails naming the fix instead of arriving
+ * as a 401 from LangSmith.
+ */
+export declare function gatewayHeaders(label: string): Record<string, string>;
+//# sourceMappingURL=load.d.ts.map

package/dist/connectors/toolserver/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../../src/connectors/toolserver/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,OAAO,KAAK,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkB5E;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,yBAAyB,GAAG,MAAM,GAC5C,OAAO,CAAC,OAAO,EAAE,CAAC,CAmBpB;AAED,kDAAkD;AAClD,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAEzE;AA+BD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAoBtE;AAUD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAepE"}

package/dist/connectors/toolserver/load.js

@@ -0,0 +1,162 @@
+/**
+ * Load a tool server integration's tools through LangSmith's gateway.
+ *
+ * The gateway (`POST /v1/toolserver/servers/{slug}/mcp`) authenticates the call,
+ * resolves the subject's stored credential for that provider, and forwards the
+ * MCP request to the tool server. From the client's side it is an ordinary
+ * remote MCP server that happens to need a LangSmith key, so the same
+ * `@langchain/mcp-adapters` client `connectors.mcp` uses talks to it.
+ *
+ * Names are not prefixed with the integration: the tool server already publishes
+ * them provider-qualified (`gmail_send_email`, `linear_create_issue`), so a
+ * prefix would only produce `gmail__gmail_send_email` and make every
+ * `includeTools` entry a guess about MDA's renaming.
+ *
+ * Everything about *reaching* LangSmith comes from the environment, because it
+ * describes the deployment rather than the agent: `LANGSMITH_API_KEY`,
+ * `LANGSMITH_ENDPOINT` / `LANGCHAIN_ENDPOINT`, `LANGCHAIN_WORKSPACE_ID`.
+ *
+ * `MDA_TOOLSERVER_AGENT_ID` is the exception that should not need to exist. The
+ * gateway resolves credentials for the user behind the key, and a deployment key
+ * that resolves to no user has no subject at all — so until the gateway can
+ * recognize a deployment from its own key, such a deployment has to name the
+ * LangSmith agent whose shared connection it borrows. It is an env var and not a
+ * connector option because it is a fact about where the deployment runs, and
+ * because it disappears once the gateway does that itself.
+ */
+import { MultiServerMCPClient } from "@langchain/mcp-adapters";
+import { selectTools } from "../tool-selection.js";
+/** LangSmith's public API, used when no endpoint is configured. */
+const DEFAULT_API_URL = "https://api.smith.langchain.com";
+/**
+ * Tools loaded per declared connector, cached for the life of the process.
+ *
+ * The compiled entry rebuilds the agent graph on every invocation, but an
+ * integration's tool surface is stable for the life of the deployment — so each
+ * connector connects and lists once and every later run reuses the result.
+ * Keyed by the connector object so two declarations (Gmail and Linear, say)
+ * never share an entry, and storing the in-flight promise dedupes concurrent
+ * first runs. A rejected load is evicted, so a transient connection error can be
+ * retried on the next run while a misconfigured declaration keeps reporting it.
+ */
+const cache = new WeakMap();
+/**
+ * Load (and cache) the tools of one declared tool server integration.
+ *
+ * `connector` carries the gateway options and is what the cache is keyed by: a
+ * declaration lives as long as the process, and two of them never share a key.
+ */
+export function loadToolServerTools(slug, label, connector) {
+    // An empty allowlist selects no tools, so there is nothing to list. Returning
+    // before connecting is what lets a project declare an integration for
+    // something other than its tools — `connectors.github` cloning a repository —
+    // without the workspace having that integration connected.
+    if (connector.includeTools?.length === 0) {
+        return Promise.resolve([]);
+    }
+    const cached = cache.get(connector);
+    if (cached) {
+        return cached;
+    }
+    const loading = connectAndLoadTools(slug, label, connector).catch((error) => {
+        cache.delete(connector);
+        throw error;
+    });
+    cache.set(connector, loading);
+    return loading;
+}
+/** Drop a connector's cached tools. Test-only. */
+export function clearToolServerToolsCacheForTests(connector) {
+    cache.delete(connector);
+}
+async function connectAndLoadTools(slug, label, config) {
+    const client = new MultiServerMCPClient({
+        mcpServers: {
+            [slug]: {
+                transport: "http",
+                url: gatewayUrl(slug, label),
+                headers: gatewayHeaders(label),
+                // The gateway only answers POST, so there is no SSE endpoint to fall
+                // back to; a failure here is a real failure worth surfacing.
+                automaticSSEFallback: false,
+                ...(config.defaultToolTimeout === undefined
+                    ? {}
+                    : { defaultToolTimeout: config.defaultToolTimeout }),
+            },
+        },
+        prefixToolNameWithServerName: false,
+        throwOnLoadError: true,
+        useStandardContentBlocks: true,
+        onConnectionError: "throw",
+    });
+    const tools = await client.getTools(slug);
+    return selectTools(label, config, tools);
+}
+/**
+ * Build the integration's gateway URL.
+ *
+ * The gateway path is appended to the configured API base rather than resolved
+ * against its origin, so a LangSmith reachable under a path prefix keeps it. That
+ * makes the base the whole prefix — `https://api.smith.langchain.com`, or
+ * `https://langsmith.acme.com/api` self-hosted — not a host to graft onto.
+ */
+export function gatewayUrl(slug, label) {
+    const base = envApiUrl() ?? DEFAULT_API_URL;
+    const origin = parseApiBase(base);
+    // A base with no host parses in some shapes (`http:/host`) but is not an API
+    // to connect to, so it is rejected alongside the ones that fail to parse.
+    if (!origin?.host) {
+        throw new Error(`${label}(...) could not build a tool server URL from "${base}". Set ` +
+            "LANGSMITH_ENDPOINT to your LangSmith API base URL, e.g. " +
+            `"${DEFAULT_API_URL}".`);
+    }
+    const prefix = origin.pathname.replace(/\/+$/, "");
+    const url = new URL(`${prefix}/v1/toolserver/servers/${slug}/mcp`, origin);
+    const agentId = trimmed(process.env.MDA_TOOLSERVER_AGENT_ID);
+    if (agentId) {
+        url.searchParams.set("agent_id", agentId);
+    }
+    return url.toString();
+}
+function parseApiBase(base) {
+    try {
+        return new URL(withScheme(base));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Authenticate the call to the gateway.
+ *
+ * The key is read at load time rather than at declaration time so the same
+ * compiled project runs in any workspace, and it is required here rather than
+ * defaulted to empty so a missing key fails naming the fix instead of arriving
+ * as a 401 from LangSmith.
+ */
+export function gatewayHeaders(label) {
+    const apiKey = trimmed(process.env.LANGSMITH_API_KEY);
+    if (!apiKey) {
+        throw new Error(`${label}(...) needs a LangSmith API key to reach the tool server. Set ` +
+            "LANGSMITH_API_KEY in the deployment's environment.");
+    }
+    const headers = { "x-api-key": apiKey };
+    const workspaceId = trimmed(process.env.LANGCHAIN_WORKSPACE_ID);
+    if (workspaceId) {
+        headers["x-tenant-id"] = workspaceId;
+    }
+    return headers;
+}
+function envApiUrl() {
+    return (trimmed(process.env.LANGSMITH_ENDPOINT) ??
+        trimmed(process.env.LANGCHAIN_ENDPOINT));
+}
+/** Accept a bare host, since that is how an endpoint is often configured. */
+function withScheme(base) {
+    return /^[a-z][a-z0-9+.-]*:\/\//i.test(base) ? base : `https://${base}`;
+}
+function trimmed(value) {
+    const trimmedValue = value?.trim();
+    return trimmedValue ? trimmedValue : undefined;
+}
+//# sourceMappingURL=load.js.map

package/dist/connectors/toolserver/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../../src/connectors/toolserver/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,mEAAmE;AACnE,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,KAAK,GAAG,IAAI,OAAO,EAA8B,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAoB,EACpB,KAAa,EACb,SAA6C;IAE7C,8EAA8E;IAC9E,sEAAsE;IACtE,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,SAAS,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1E,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IACjE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAoB,EACpB,KAAa,EACb,MAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC;QACtC,UAAU,EAAE;YACV,CAAC,IAAI,CAAC,EAAE;gBACN,SAAS,EAAE,MAAM;gBACjB,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;gBAC5B,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC9B,qEAAqE;gBACrE,6DAA6D;gBAC7D,oBAAoB,EAAE,KAAK;gBAC3B,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;aACvD;SACF;QACD,4BAA4B,EAAE,KAAK;QACnC,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;QAC9B,iBAAiB,EAAE,OAAO;KAC3B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAoB,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,SAAS,EAAE,IAAI,eAAe,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iDAAiD,IAAI,SAAS;YACpE,0DAA0D;YAC1D,IAAI,eAAe,IAAI,CAC1B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,0BAA0B,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC7D,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,gEAAgE;YACtE,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}

package/dist/extension.d.ts

@@ -0,0 +1,77 @@
+/**
+ * The contribution API behind the extensible MDA primitives.
+ *
+ * `defineExtension(kind, options)` returns the factory an agent project calls —
+ * `connectors.slack({ … })`, `connectors.github({ … })`, `sandboxes.langsmith()`.
+ * The `kind` narrows which hooks the primitive may implement; argument parsing,
+ * branding, and manifest stamping are shared.
+ *
+ * Every kind declares its input through `args`, which takes a schema from any
+ * [Standard Schema](https://standardschema.dev) library — Zod, Valibot,
+ * ArkType — or a plain function where a schema does not fit. Validating through
+ * that interface keeps the vendor out of this package's dependencies, so a
+ * contributor picks whichever library they already use.
+ *
+ * This module is deliberately absent from the package barrel. Only the
+ * first-party namespaces in `namespaces.ts` contribute primitives, so an agent
+ * project cannot mount its own adapter, HTTP route, or sandbox backend into the
+ * managed runtime. Opening it up to third-party packages is a later step.
+ *
+ * The `auth`, `credentials`, and `connect` primitives are extended by plain
+ * factories rather than through here: they return inert configuration objects
+ * with no brand, hooks, or normalization to share. They gain an envelope when
+ * this API is exported and their inputs need validating at the boundary.
+ */
+import type { StandardSchemaV1 } from "@standard-schema/spec";
+import type { ChannelTransport } from "./channels/runtime.js";
+import { type Connector, type ConnectorRequirements, type ConnectorToolList, type EventsContext, type HttpContext, type SandboxContext, type ToolContext } from "./runtime/connector.js";
+import { type SandboxOptions, type SandboxDefinition, type SandboxProviderClass } from "./sandbox.js";
+/** The primitives that carry a shared construction envelope. */
+export type ExtensionKind = "connector" | "sandbox";
+/**
+ * How author input becomes the arguments a primitive is built from.
+ *
+ * Either a schema from any [Standard Schema](https://standardschema.dev)
+ * library — Zod, Valibot, ArkType, … — or a plain function for the cases a
+ * schema cannot express. Both run at module load, so misconfiguration surfaces
+ * at build or dev startup rather than mid-run. Defaults and coercions belong
+ * here too: whatever this produces is what the primitive carries.
+ */
+export type ExtensionArgs<TInput, TArgs> = StandardSchemaV1<TInput, TArgs> | ((input: TInput) => TArgs);
+/** Shared by every kind: how the factory's input is validated, and its name. */
+interface ExtensionEnvelope<TInput, TArgs> {
+    args: ExtensionArgs<TInput, TArgs>;
+    /**
+     * How the factory is spelled in an agent project, e.g. `"connectors.mcp"`.
+     * Prefixes validation errors, which is the only place an author sees it.
+     */
+    label: string;
+}
+/**
+ * A connector contributes tools, HTTP routes, sandbox provisioning, inbound
+ * events, and/or a named messaging surface. Hooks receive the built connector,
+ * so they can read the parsed arguments spread onto it.
+ */
+export interface ConnectorExtensionOptions<TInput, TArgs extends object, TKind extends string> extends ExtensionEnvelope<TInput, TArgs> {
+    /** Diagnostic label (e.g. `"mcp_servers"`). Mounts use the file-stem name. */
+    kind: TKind;
+    tools?(ctx: ToolContext, self: ConnectorInstance<TArgs, TKind>): ConnectorToolList | Promise<ConnectorToolList>;
+    http?(ctx: HttpContext, self: ConnectorInstance<TArgs, TKind>): void | Promise<void>;
+    sandbox?(ctx: SandboxContext, self: ConnectorInstance<TArgs, TKind>): void | Promise<void>;
+    events?(ctx: EventsContext, self: ConnectorInstance<TArgs, TKind>): Response | Promise<Response>;
+    messaging?(env: NodeJS.ProcessEnv, self: ConnectorInstance<TArgs, TKind>): ChannelTransport | undefined;
+    requirements?(name: string, self: ConnectorInstance<TArgs, TKind>): ConnectorRequirements;
+}
+/** The connector a `"connector"` extension builds: its brand, kind, and args. */
+export type ConnectorInstance<TArgs extends object, TKind extends string> = Connector & TArgs & {
+    readonly kind: TKind;
+};
+/** A sandbox contributes the execution environment the agent's shell runs in. */
+export interface SandboxExtensionOptions<TInput, TProvider extends SandboxProviderClass<any, any>> extends ExtensionEnvelope<TInput, SandboxOptions<TProvider>> {
+    /** Backend class MDA constructs with `new Provider({ sandbox, … })`. */
+    provider: TProvider;
+}
+export declare function defineExtension<TInput, TArgs extends object, TKind extends string>(kind: "connector", options: ConnectorExtensionOptions<TInput, TArgs, TKind>): (input: TInput) => ConnectorInstance<TArgs, TKind>;
+export declare function defineExtension<TInput, TProvider extends SandboxProviderClass<any, any>>(kind: "sandbox", options: SandboxExtensionOptions<TInput, TProvider>): (input: TInput) => SandboxDefinition<TProvider>;
+export {};
+//# sourceMappingURL=extension.d.ts.map

package/dist/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,cAAc,CAAC;AAEtB,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,IACnC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,GAC/B,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC;AAE/B,gFAAgF;AAChF,UAAU,iBAAiB,CAAC,MAAM,EAAE,KAAK;IACvC,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB,CACxC,MAAM,EACN,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,MAAM,CACpB,SAAQ,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;IACxC,8EAA8E;IAC9E,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,CAAC,CACJ,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,CAAC,CACH,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,CAAC,CACN,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,CAAC,CACL,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,SAAS,CAAC,CACR,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,gBAAgB,GAAG,SAAS,CAAC;IAChC,YAAY,CAAC,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,GACpC,qBAAqB,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,CAC3B,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,MAAM,IAClB,SAAS,GAAG,KAAK,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAEjD,iFAAiF;AACjF,MAAM,WAAW,uBAAuB,CACtC,MAAM,EACN,SAAS,SAAS,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAChD,SAAQ,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5D,wEAAwE;IACxE,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,eAAe,CAC7B,MAAM,EACN,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,MAAM,EAEpB,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,GACvD,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACtD,wBAAgB,eAAe,CAC7B,MAAM,EACN,SAAS,SAAS,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,EAEhD,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,GAClD,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,CAAC,SAAS,CAAC,CAAC"}

package/dist/extension.js

@@ -0,0 +1,127 @@
+/**
+ * The contribution API behind the extensible MDA primitives.
+ *
+ * `defineExtension(kind, options)` returns the factory an agent project calls —
+ * `connectors.slack({ … })`, `connectors.github({ … })`, `sandboxes.langsmith()`.
+ * The `kind` narrows which hooks the primitive may implement; argument parsing,
+ * branding, and manifest stamping are shared.
+ *
+ * Every kind declares its input through `args`, which takes a schema from any
+ * [Standard Schema](https://standardschema.dev) library — Zod, Valibot,
+ * ArkType — or a plain function where a schema does not fit. Validating through
+ * that interface keeps the vendor out of this package's dependencies, so a
+ * contributor picks whichever library they already use.
+ *
+ * This module is deliberately absent from the package barrel. Only the
+ * first-party namespaces in `namespaces.ts` contribute primitives, so an agent
+ * project cannot mount its own adapter, HTTP route, or sandbox backend into the
+ * managed runtime. Opening it up to third-party packages is a later step.
+ *
+ * The `auth`, `credentials`, and `connect` primitives are extended by plain
+ * factories rather than through here: they return inert configuration objects
+ * with no brand, hooks, or normalization to share. They gain an envelope when
+ * this API is exported and their inputs need validating at the boundary.
+ */
+import { CONNECTOR_BRAND, } from "./runtime/connector.js";
+import { normalizeSandboxOptions, sandboxProviderKey, } from "./sandbox.js";
+export function defineExtension(kind, options) {
+    switch (kind) {
+        case "connector":
+            return connectorExtension(options);
+        case "sandbox":
+            return sandboxExtension(options);
+        default:
+            throw new TypeError(`Unknown extension kind: ${String(kind)}`);
+    }
+}
+function connectorExtension(options) {
+    const parse = parser(options);
+    return (input) => {
+        const args = parse(input);
+        const self = { kind: options.kind, ...args };
+        // Hooks and the brand stay non-enumerable so a connector still spreads and
+        // serializes as its plain configuration.
+        hide(self, CONNECTOR_BRAND, true);
+        if (options.tools) {
+            const tools = options.tools;
+            hide(self, "tools", (ctx) => tools(ctx, self));
+        }
+        if (options.http) {
+            const http = options.http;
+            hide(self, "http", (ctx) => http(ctx, self));
+        }
+        if (options.sandbox) {
+            const sandbox = options.sandbox;
+            hide(self, "sandbox", (ctx) => sandbox(ctx, self));
+        }
+        if (options.events) {
+            const events = options.events;
+            hide(self, "events", (ctx) => events(ctx, self));
+        }
+        if (options.messaging) {
+            const messaging = options.messaging;
+            hide(self, "messaging", (env) => messaging(env, self));
+        }
+        if (options.requirements) {
+            const requirements = options.requirements;
+            hide(self, "requirements", (name) => requirements(name, self));
+        }
+        return self;
+    };
+}
+function sandboxExtension(options) {
+    const parse = parser(options);
+    return (input) => {
+        if (sandboxProviderKey(options.provider) !== "LangSmithSandbox") {
+            throw new TypeError("MDA only supports deepagents' LangSmithSandbox provider");
+        }
+        return {
+            kind: "sandbox",
+            provider: options.provider,
+            // The managed-key rule is MDA policy, not the provider's, so it runs
+            // here rather than in each provider's `args`.
+            options: normalizeSandboxOptions(parse(input)),
+        };
+    };
+}
+/**
+ * Resolve `args` into the function the factory runs on its input.
+ *
+ * A schema is validated through the Standard Schema interface, so the vendor
+ * (Zod, Valibot, …) never has to be a dependency of this package.
+ */
+function parser(options) {
+    const { args, label } = options;
+    if (typeof args === "function") {
+        return args;
+    }
+    const { validate } = args["~standard"];
+    return (input) => {
+        const result = validate(input);
+        if (result instanceof Promise) {
+            throw new TypeError(`${label}(...) needs a schema that validates synchronously, because ` +
+                "primitives are declared at module load. Drop the async refinement " +
+                "or validate inside a hook instead.");
+        }
+        if (result.issues) {
+            throw new Error(`${label}(...) ${describeIssues(result.issues)}`);
+        }
+        return result.value;
+    };
+}
+/** Render schema issues as `path: message`, in the order the vendor reported. */
+function describeIssues(issues) {
+    const lines = issues.map((issue) => {
+        const path = (issue.path ?? [])
+            .map((segment) => String(typeof segment === "object" ? segment.key : segment))
+            .join(".");
+        return path.length > 0 ? `${path}: ${issue.message}` : issue.message;
+    });
+    return lines.length === 1
+        ? `received invalid configuration — ${lines[0]}.`
+        : `received invalid configuration:\n  - ${lines.join("\n  - ")}`;
+}
+function hide(target, key, value) {
+    Object.defineProperty(target, key, { value, enumerable: false });
+}
+//# sourceMappingURL=extension.js.map

package/dist/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,EACL,eAAe,GAQhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAgGtB,MAAM,UAAU,eAAe,CAC7B,IAAmB,EACnB,OAAY;IAEZ,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC;YACE,MAAM,IAAI,SAAS,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAwD;IAExD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,EAGzC,CAAC;QACF,2EAA2E;QAC3E,yCAAyC;QACzC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,GAAsB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAIvB,OAAmD;IAEnD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,kBAAkB,EAAE,CAAC;YAChE,MAAM,IAAI,SAAS,CACjB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,qEAAqE;YACrE,8CAA8C;YAC9C,OAAO,EAAE,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAC/C,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CACb,OAAyC;IAEzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,GAAG,KAAK,6DAA6D;gBACnE,oEAAoE;gBACpE,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,MAAyC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,MAAM,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAC5D;aACA,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,oCAAoC,KAAK,CAAC,CAAC,CAAC,GAAG;QACjD,CAAC,CAAC,wCAAwC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,GAAoB,EAAE,KAAc;IAChE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/identity/claims.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Claim-name resolution shared by authoring validation and the runtime token
+ * mapper, so both agree on which claim supplies each envelope field.
+ */
+import type { ClaimMapping } from "./types.js";
+/** The claim supplying the caller id, or `undefined` when none is mapped. */
+export declare function userClaimName(mapping: ClaimMapping): string | undefined;
+/** The claim supplying the active organization id, if any. */
+export declare function organizationClaimName(mapping: ClaimMapping): string | undefined;
+/**
+ * Normalize a `groups` claim value into a list.
+ *
+ * IdPs are inconsistent here: Auth0 and Okta send an array, Entra sends an array
+ * of object ids, and some proxies flatten to a delimited string. Accept all
+ * three rather than making authors pre-process the claim.
+ */
+export declare function normalizeGroups(value: unknown): string[];
+//# sourceMappingURL=claims.d.ts.map

package/dist/identity/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/identity/claims.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAEvE;AAED,8DAA8D;AAC9D,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,GACpB,MAAM,GAAG,SAAS,CAEpB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAaxD"}